Defeating Prompt Injections by Design · arXivisual